Susan

Distinguished
Apr 8, 2004
249
0
18,680
Archived from groups: microsoft.public.windowsxp.general (More info?)

[HKEY_USERS\S-1-5-21-3826161146-3836399785-2531176041-1006\Software\FunWebProducts\Settings\MSNMessenger\BuddyIcons\(S)If
the only place I cn b wiv u is in my dreams thn I wil sleep 4eva(S)7 days
til (#)lanzorote(#)\(f)(*)(*)lou(*)(*)]
[HKEY_USERS\S-1-5-21-3826161146-3836399785-2531176041-1006\Software\FunWebProducts\Settings\MSNMessenger\BuddyIcons\(S)If
the only place I cn b wiv u is in my dreams thn I wil sleep 4eva(S)7 days
til (#)lanzorote(#)\(f)(*)(*)lou(*)(*)my fish died!!!!:'((*)]

[HKEY_USERS\S-1-5-21-3826161146-3836399785-2531176041-1006\Software\FunWebProducts\Settings\MSNMessenger\BuddyIcons\(S)If
the only place I cn b wiv u is in my dreams thn I wil sleep 4eva(S)7 days
til (#)lanzorote(#)\(f)(L) i dnt play hard to get....... i play to get
u!!!(l)]

[HKEY_USERS\S-1-5-21-3826161146-3836399785-2531176041-1006\Software\FunWebProducts\Settings\MSNMessenger\BuddyIcons\(S)If
the only place I cn b wiv u is in my dreams thn I wil sleep 4eva(S)7 days
til (#)lanzorote(#)\(L)(K)gigi]

How would you write a script that would remove the above entries?


begin 666 16x16_smiley-happy.gif
M1TE&.#EA$ `0`-7_``("`/[C`?WB!/_E"_7<$/_F$S(M!+>F&__I+?_J/MO*
M-\.U._[L4A\="O[P=C8T(/STK?_ZS?O?`/;7`//4`/C;`>3+`<JT`_K=!;FE
M!.;."Y:%"?_A'?_F(TU'&]'$9J"65/KNC?'0`.[-`.K'`.?%`/+0%/W=&>*\
M`.?"#FI:!^S)$MVS"N*Z#-:J!^[ES?\`````````````````````````````
M`````````````````````````````````"'Y! $``# `+ `````0`! `0 :[
M0)A0R.%TBIRA,$41:%2+C\.A.'A4EE$+=BHD0(#&*Q("+ H"D]"%&E4"<+A$
M(D*YAIP"@N$(.1(=:"="*QA>#A 0$1!^"00;(BTL)1,2`A@7*E<;%A(4=D,L
M+20C(B,D*"QW2C!&'0BP!0-%2AP#" L/((L@'AT#$FHF$EXA'@\1BW]HD2L5
M`QT,(8E^#!T;*A0M+2,2&!DJ!@WC#086%20L,"PDE7$"<>BKZVV5<YXCH*SK
)+/TN\T*"```[
`
end
 

Malke

Distinguished
Apr 6, 2004
3,000
0
20,780
Archived from groups: microsoft.public.windowsxp.general (More info?)

Susan wrote:

>
[HKEY_USERS\S-1-5-21-3826161146-3836399785-2531176041-1006\Software\FunWebProducts\Settings\MSNMessenger\BuddyIcons\(S)If
> the only place I cn b wiv u is in my dreams thn I wil sleep 4eva(S)7
> days til (#)lanzorote(#)\(f)(*)(*)lou(*)(*)]
>
[HKEY_USERS\S-1-5-21-3826161146-3836399785-2531176041-1006\Software\FunWebProducts\Settings\MSNMessenger\BuddyIcons\(S)If
> the only place I cn b wiv u is in my dreams thn I wil sleep 4eva(S)7
> days til (#)lanzorote(#)\(f)(*)(*)lou(*)(*)my fish died!!!!:'((*)]
>
>
[HKEY_USERS\S-1-5-21-3826161146-3836399785-2531176041-1006\Software\FunWebProducts\Settings\MSNMessenger\BuddyIcons\(S)If
> the only place I cn b wiv u is in my dreams thn I wil sleep 4eva(S)7
> days til (#)lanzorote(#)\(f)(L) i dnt play hard to get....... i play
> to get u!!!(l)]
>
>
[HKEY_USERS\S-1-5-21-3826161146-3836399785-2531176041-1006\Software\FunWebProducts\Settings\MSNMessenger\BuddyIcons\(S)If
> the only place I cn b wiv u is in my dreams thn I wil sleep 4eva(S)7
> days til (#)lanzorote(#)\(L)(K)gigi]
>
> How would you write a script that would remove the above entries?

Are you asking for help in removing malware or help in coding for a
project or school assignment? If the former, you don't need to write
your own script; you need to run through these malware removal steps
systematically in Safe Mode with updated tools:

http://www.elephantboycomputers.com/page2.html#Removing_Malware

If you are looking for help with coding, try one of the developer and/or
scripting newsgroups. Here is a link with all the MS newsgroups:

http://aumha.org/nntp.htm

Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User
 

Susan

Distinguished
Apr 8, 2004
249
0
18,680
Archived from groups: microsoft.public.windowsxp.general (More info?)

Thank you Malke! Don't have money and time for school- got kids in school!
But I keep trying to learn! I volunteer and learn and get to do things no
one would hire me to do! Got victim clear of a smitfraud infection and just
trying to finish up loose ends from other things.

"Malke" <invalid@not-real.com> wrote in message
news:uZmbd89pFHA.644@TK2MSFTNGP10.phx.gbl...
> Susan wrote:
>
>>
> [HKEY_USERS\S-1-5-21-3826161146-3836399785-2531176041-1006\Software\FunWebProducts\Settings\MSNMessenger\BuddyIcons\(S)If
>> the only place I cn b wiv u is in my dreams thn I wil sleep 4eva(S)7
>> days til (#)lanzorote(#)\(f)(*)(*)lou(*)(*)]
>>
> [HKEY_USERS\S-1-5-21-3826161146-3836399785-2531176041-1006\Software\FunWebProducts\Settings\MSNMessenger\BuddyIcons\(S)If
>> the only place I cn b wiv u is in my dreams thn I wil sleep 4eva(S)7
>> days til (#)lanzorote(#)\(f)(*)(*)lou(*)(*)my fish died!!!!:'((*)]
>>
>>
> [HKEY_USERS\S-1-5-21-3826161146-3836399785-2531176041-1006\Software\FunWebProducts\Settings\MSNMessenger\BuddyIcons\(S)If
>> the only place I cn b wiv u is in my dreams thn I wil sleep 4eva(S)7
>> days til (#)lanzorote(#)\(f)(L) i dnt play hard to get....... i play
>> to get u!!!(l)]
>>
>>
> [HKEY_USERS\S-1-5-21-3826161146-3836399785-2531176041-1006\Software\FunWebProducts\Settings\MSNMessenger\BuddyIcons\(S)If
>> the only place I cn b wiv u is in my dreams thn I wil sleep 4eva(S)7
>> days til (#)lanzorote(#)\(L)(K)gigi]
>>
>> How would you write a script that would remove the above entries?
>
> Are you asking for help in removing malware or help in coding for a
> project or school assignment? If the former, you don't need to write
> your own script; you need to run through these malware removal steps
> systematically in Safe Mode with updated tools:
>
> http://www.elephantboycomputers.com/page2.html#Removing_Malware
>
> If you are looking for help with coding, try one of the developer and/or
> scripting newsgroups. Here is a link with all the MS newsgroups:
>
> http://aumha.org/nntp.htm
>
> Malke
> --
> Elephant Boy Computers
> www.elephantboycomputers.com
> "Don't Panic!"
> MS-MVP Windows - Shell/User
 

Malke

Distinguished
Apr 6, 2004
3,000
0
20,780
Archived from groups: microsoft.public.windowsxp.general (More info?)

Susan wrote:

> Thank you Malke! Don't have money and time for school- got kids in
> school! But I keep trying to learn! I volunteer and learn and get to
> do things no
> one would hire me to do! Got victim clear of a smitfraud infection
> and just trying to finish up loose ends from other things.
>
Then you don't need to reinvent the wheel. Just follow the malware steps
on the website. Familiarize yourself with HijackThis, too. See links on
the site.

Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User